[wp-trac] [WordPress Trac] #11959: Value Truncation Still Unchecked in registration.php
WordPress Trac
noreply at wordpress.org
Thu Aug 8 14:21:17 UTC 2013
#11959: Value Truncation Still Unchecked in registration.php
--------------------------+-----------------------------
Reporter: miqrogroove | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: Future Release
Component: Users | Version:
Severity: normal | Resolution:
Keywords: needs-patch |
--------------------------+-----------------------------
Comment (by johnpbloch):
Regarding fixing this issue, what would be the preferable way to fix it?
It seems to me that `username_exists()` should not truncate the username
to 60 characters, since that would give a false positive. It seems to me,
rather, that functions like `wp_insert_user()` or `sanitize_user()` should
be making this sort of check instead of `username_exists()`. Thoughts?
--
Ticket URL: <http://core.trac.wordpress.org/ticket/11959#comment:7>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list